This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File: TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier: fIfETMsKK7F+vnXeyJ+OG0bELp1HILI5DhJC3PdxAcY=
Subject key identifier: F8:FE:C6:00:B4:42:B4:CE:0C:5A:4F:1B:B1:A9:FC:75:BD:2B:39:CC
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial: 0D36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number: 0D18
Signing time: Sat 24 Jan 2026 17:44:28 +0000
Manifest this update: Sat 24 Jan 2026 17:44:28 +0000
Manifest next update: Sat 31 Jan 2026 17:44:28 +0000
Files and hashes: 1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: moSK3AUQ3q8W4TQaCBH7zZkv1Bz7aCOhTUJsForwBbk=)
2: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
3: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
4: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
5: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Validity
Not Before: Jan 24 17:44:28 2026 GMT
Not After : Jan 31 17:44:28 2026 GMT
Subject: CN=697504fc-a741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:d9:28:dc:46:3c:28:eb:62:86:bd:47:dd:
c2:82:2d:19:85:b3:c9:91:1c:5f:34:4b:82:7f:e1:
02:7d:ef:f6:2e:cd:a8:bb:4b:b4:4e:ce:ab:96:0b:
2b:c4:fe:69:bc:4e:e3:c6:b4:17:5b:c7:2f:ab:f8:
0d:9b:00:76:9d:46:54:02:95:25:b7:7c:a4:38:0c:
24:e8:11:e3:c0:12:bd:80:fc:1a:97:83:9c:a3:fc:
fa:74:8e:d7:84:a2:a2:0b:03:d5:36:0c:78:71:f4:
f8:04:94:61:bc:8a:dd:9e:77:33:bf:7e:db:9d:5c:
8e:1e:5e:c3:f6:86:99:69:a2:4b:40:c2:fc:56:e9:
61:bd:66:e0:42:d2:4f:2b:60:03:e0:5b:03:bc:b7:
da:b6:a7:90:8b:58:88:b3:48:48:75:b7:17:5a:a3:
7b:39:40:ed:3d:5a:6c:d7:fa:bd:c7:35:a2:b2:35:
bc:a7:16:18:86:e7:4f:89:74:d5:7f:57:1c:72:e1:
27:9d:f7:e8:bd:6a:5a:db:9f:ee:00:77:28:89:7d:
d7:ed:cc:88:69:e8:bd:93:26:c9:71:5c:5a:92:f2:
5c:9d:7e:25:28:01:e6:f6:d0:10:8a:04:98:d8:bd:
18:a7:89:e2:d4:7c:40:6a:0d:37:57:2d:fe:f1:13:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:C6:00:B4:42:B4:CE:0C:5A:4F:1B:B1:A9:FC:75:BD:2B:39:CC
X509v3 Authority Key Identifier:
keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:94:28:41:01:25:b7:00:b6:f9:62:27:21:f5:4f:7e:65:f9:
94:07:c5:bb:2a:85:b4:7c:33:2f:5a:2f:7d:c8:55:bb:ff:0a:
1d:01:d6:79:c2:db:c4:a2:73:c7:56:b0:6b:65:1d:32:52:f7:
28:da:ec:35:64:c2:6a:d6:6a:52:cd:71:db:10:10:2e:4c:d7:
f2:e6:49:e1:39:9f:f8:a9:16:48:09:a6:ed:54:dd:b2:09:b7:
b2:49:2c:75:0d:71:58:95:23:77:25:b9:d9:65:db:ed:b8:8f:
67:b5:a5:e3:1e:e5:5d:24:14:1f:57:c3:2b:d8:e4:d5:54:33:
18:92:3b:ef:5f:4a:9c:c2:4a:d0:7f:6e:89:cc:97:a7:da:c7:
c8:03:7c:ca:c5:1c:35:be:8c:0d:52:2a:17:c0:76:39:64:14:
51:87:80:8a:04:79:20:82:d1:ee:0a:b4:85:eb:e5:e8:38:8e:
82:99:64:b8:6b:fc:89:7e:cc:05:73:6c:8f:66:30:33:63:f8:
34:08:ac:f4:e0:e7:d4:da:68:ef:58:96:57:5b:95:c8:60:f8:
45:b5:27:77:a3:b1:38:5d:c2:52:99:ab:80:74:4b:1e:fc:c7:
24:1f:95:a3:36:67:13:ec:c8:71:62:ab:4c:bb:7a:b7:9d:33:
ab:46:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:10 2026 by rpki-client